Infocon

The intent of the 'Infocon' is to reflect changes in malicious traffic and the possibility of disrupted connectivity. In particular important is the concept of "Change". Every host connected to the Internet is subject to some amount of traffic caused by worms and viruses. However, once a worm has been identified and the number of infected machines is no longer increasing, this traffic is not likely to cause any disruptions.

The Infocon is intended to apply to the condition of the Internet infrastructure. We do not monitor particular nations or companies.

Link To Current Infocon Status

You may use the following html code to link to the current Infocon status:

In addition to the graphic, we offer two text feeds. The text feed can take up to 15 minutes to update.

Infocon Definition

Infocon images below use a white background. Transparent images are available by adding "_transparent" such as status_blue_transparent.gif.

Everything is normal. No significant new threat known.

This status is used for testing only. Everything is normal. No significant new threat known.

We are currently tracking a significant new threat. The impact is
either unknown or expected to be minor to the infrastructure. However, local impact could be significant. Users are advised to take immediate specific action to contain the impact. Example: 'MSBlaster' worm outbreak.

A major disruption in connectivity is imminent or in progress. Examples: Code Red on its return, and SQL Slammer worm during its first half day